Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W8/00—Network data management
  • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
  • H04W8/183—Processing at user equipment or user record carrier
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/30—Security of mobile devices; Security of mobile applications
  • H04W12/35—Protecting application or service provisioning, e.g. securing SIM application provisioning
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/40—Security arrangements using identity modules
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
  • H04W4/50—Service provisioning or reconfiguring
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
  • H04W88/18—Service support devices; Network management devices
  • H04W88/182—Network node acting on behalf of an other network entity, e.g. proxy
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2101/00—Indexing scheme associated with group H04L61/00
  • H04L2101/30—Types of network names
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2101/00—Indexing scheme associated with group H04L61/00
  • H04L2101/30—Types of network names
  • H04L2101/33—Types of network names containing protocol addresses or telephone numbers
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2101/00—Indexing scheme associated with group H04L61/00
  • H04L2101/60—Types of network addresses
  • H04L2101/618—Details of network addresses
  • H04L2101/659—Internet protocol version 6 [IPv6] addresses
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2101/00—Indexing scheme associated with group H04L61/00
  • H04L2101/60—Types of network addresses
  • H04L2101/672—Short addresses
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/60—Context-dependent security
  • H04W12/69—Identity-dependent
  • H04W12/71—Hardware identity
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/60—Context-dependent security
  • H04W12/69—Identity-dependent
  • H04W12/77—Graphical identity

Definitions

• This disclosure relates to discovering an embedded subscriber identification module (eSIM) root discovery service endpoints.
• eSIM embedded subscriber identification module
• Telephony devices such as cellular phones and tablets, include subscriber identification modules (SIM) that are used by service operators, i.e., a mobile network operator (MNO) or virtual ⁇ (MVNO), to identify and authenticate network subscribers.
• SIM subscriber identification modules
• MNO mobile network operator
• MVNO virtual ⁇
• eSIM embedded SIM
• eSIM profile also referred to as a subscription profile
• GSMA Global System for Mobile Communications Association
• SM-DS Subscription Manager - Discovery Server
• One aspect of the disclosure provides a computer-implemented method that when executed on data processing hardware causes the data processing hardware to perform operations.
• the operations include receiving a request to provision an embedded subscriber identity module (eSIM) profile to an eSIM-enabled device.
• the request includes a proxy eSIM identifier (ElD) prefix.
• the eSIM profile is associated with a service provider of a mobile communication service a user of the eSIM-enabled device subscribes to.
• the operations also include determining whether the proxy ElD prefix includes an address of a target discovery server the eSIM-enabled device is configured to connect to.
• the operations also include extracting the address of the target discovery server from the proxy EID prefix. Using the address of the target discovery server extracted from the proxy EID prefix, the operations also include registering a discovery event with the target discovery server. The discovery event indicates that the service provider has reserved the eSIM profile to the proxy EID or an actual EID assigned to the eSIM- enabled device.
• Implementations of the disclosure may include one or more of the following optional features.
• determining whether the proxy EID prefix includes the address of the target discovery- server includes determining whether the proxy EID prefix encodes a fully qualified domain name of the target discovery server.
• determining whether the proxy EID prefix includes the address of the target discovery server includes determining whether the proxy EID includes a compression of a fully qualified domain name of the target discovery server In these implementations, the compression of the fully qualified domain name includes a compressed IPv6 address.
• the target discovery server may be operated by a manufacturer of the eSIM- enabled device. Additionally or alternatively, the service provider may include a mobile network operator (MNO) or a mobile virtual network operator (MVNO).
• MNO mobile network operator
• MVNO mobile virtual network operator
• the operations further include: accessing a proxy EID to EID conversion table to resolve the address of the target discovery server from the proxy EID prefix; and using the address of the target discovery server resolved from the proxy EID prefix by accessing the proxy EID to EID conversion table, registering the discovery event with the target discovery server.
• the data processing hardware may reside on a service provider server associated with the service provider.
• the service provider service may include a profile server configured to provision and reserve the eSIM profile for the proxy EID or the actual EID assigned to the eSIM-enabled device.
• the profile server includes a Subscription Manager (SM), a Subscription Manager Data Preparation (SM-DP), a Subscription Manager Data Preparation Plus (SM- DP+), a Subscription Manager Secure Routing (SM-SR), a Profile Delivery Platform, or a Profile Delivery Server.
• SM Subscription Manager
• SM-DP Subscription Manager Data Preparation
• SM- DP+ Subscription Manager Data Preparation Plus
• SM-SR Subscription Manager Secure Routing
• Profile Delivery Platform or a Profile Delivery Server.
• Another aspect of the disclosure provides a system that includes data processing hardware and memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations.
• the operations include receiving a request to provision an embedded subscriber identity module (eSIM) profile to an eSIM-enabled device.
• the request includes a proxy eSIM identifier (EID) prefix.
• the eSIM profile is associated with a service provider of a mobile communication service a user of the eSIM-enabled device subscribes to.
• the operations also include determining whether the proxy EID prefix includes an address of a target discovery server the eSIM-enabled device is configured to connect to.
• the operations also include extracting the address of the target discovery server from the proxy EID prefix. Using the address of the target discovery server extracted from the proxy EID prefix, the operations also include registering a discovery event with the target discovery server.
• the discovery event indicates that the service provider has reserved the eSIM profile to the proxy EID or an actual EID assigned to the eSIM-enabled device.
• Implementations of the disclosure may include one or more of the following optional features.
• determining whether the proxy EID prefix includes the address of the target discovery server includes determining whether the proxy EID prefix encodes a fully qualified domain name of the target discovery server.
• determining whether the proxy EID prefix includes the address of the target discovery server includes determining whether the proxy EID includes a compression of a fully qualified domain name of the target discovery server.
• the compression of the fully qualified domain name includes a compressed IPv6 address.
• the target discovery server may be operated by a manufacturer of the eSIM- enabled device. Additionally or alternatively, the service provider may include a mobile network operator (MNO) or a mobile virtual network operator (MVNO).
• MNO mobile network operator
• MVNO mobile virtual network operator
• the operations further include: accessing a proxy EID to EID conversion table to resolve the address of the target discovery server from the proxy EID prefix; and using the address of the target discovery- server resolved from the proxy EID prefix by accessing the proxy EID to EID conversion table, registering the discovery event with the target discovery server.
• the data processing hardware may reside on a service provider server associated with the service provider.
• the service provider service may include a profile server configured to provision and reserve the eSIM profile for the proxy EID or the actual EID assigned to the eSIM-enabled device.
• the profile server includes a Subscription Manager (SM), a Subscription Manager Data Preparation (SM-DP), a Subscription Manager Data Preparation Plus (SM- DP+), a Subscription Manager Secure Routing (SM-SR), a Profile Delivery Platform, or a Profile Delivery Server.
• SM Subscription Manager
• SM-DP Subscription Manager Data Preparation
• SM- DP+ Subscription Manager Data Preparation Plus
• SM-SR Subscription Manager Secure Routing
• Profile Delivery Platform or a Profile Delivery Server.
• FIGS. 1 A and IB are schematic views of example discovery server-based activation procedures for activating a new eSIM-enabled telephony device.
• FIG. 2 is a schematic view of an example proxy EID defined to resolve an address of a target discovery server
• FIG. 3 is a schematic view of an example proxy EID to ElD conversion table.
• FIGS. 4A-4D are schematic views of example operations performed by a service provider server for resolving an address of a target discovery server that an eSIM- enabled device connects to.
• FIG. 5 is a flowchart of an example arrangement of operations for a method of contacting a prescribed profile server for downloading a corresponding eSIM profile therefrom for activation of on a new device.
• FIG. 6 is a schematic view of an example computing device that may be used to implement the systems and methods described herein.
• Telephony devices such as cellular phones, watches, and tablets, include embedded subscriber identification modules (eSIM) that are used by a service provider, e.g., mobile network operator (MNO) or mobile virtual network operator (MVNO), to identify and authenticate network subscribers.
• MNO mobile network operator
• MVNO mobile virtual network operator
• eSIM profile also referred to as a subscription profile or an operational profile
• a profile server associated with the service provider for operating the device on a network of the service provider.
• a service provider activates a new device on its network using a procedure defined by the Global System for Mobile Communications Association (GSMA) in which the service provider informs a central root discovery service, e.g., a Subscription Manager - Discovery Server (SM-DS), that an eSIM profile is available for the new device having a globally unique eSIM identifier ( EID)
• GSMA Global System for Mobile Communications Association
• SM-DS Subscription Manager - Discovery Server
• EID globally unique eSIM identifier
• the service provider simply generates a new eSIM profile at the profile server for the new device and provides the pairing of the address of the profile server holding the eSIM profile and the EID that uniquely identifies the device to the root discovery server operated by the GSMA so that the root discovers' server can redirect the device to the profile server upon recognition of the EID.
• OEMs original equipment manufacturers
• Implementations herein are directed toward assigning new eSIM-enabled telephony devices with proxy EIDs for use by service providers in identifying appropriate OEM-based discovery servers to contact so that the telephony devices can be redirected to the prescribed profile server for downloading corresponding eSIM profiles for activation.
• a service provider may use a proxy EID uniquely assigned to an eSIM of a new telephony device to uniquely identifies the new telephony device.
• the proxy EID additionally functions as a discovery service-based identifier that a service provider server uses to identify the appropriate target discovery server 150 that the telephony device will be first contacting during activation of the device.
• target discovery service, target root discovery service, and OEM-based discovery service are used interchangeably.
• FIGS. 1A and 1B are schematic views of example discovery server-based activation procedures 100 for activating a new eSIM-enabled telephony device (also referred to as “device”) 10 on an operator network of a given service provider (e.g., MNO or MVNO) 102.
• activating the device 10 includes the device 10 downloading an eSIM profile 14 from a profile server 104 associated with the service provider 102.
• the eSIM profile 14 is authorized by the service provider 102 in order to access the operator network.
• the profile server 104 is configured to generate and provide the eSIM profile 14 for use by the device 10 on the operator network.
• the device 10 may be associated with a customer (new or existing) of the service provider 102 and use the device 10 to access the operator network when the service provider 102 authorizes the respective eSIM profile 14 downloaded from the profile server 104.
• the profile sewer 104 may be a Subscription Manager (SM), a Subscription Manager Pius (SM+), a Subscription Manager Data Preparation (SM-DP), a Subscription Manager Data Preparation Plus (SM-DP+), a Subscription Manager Secure Routing Pius (SM-SR+), a Profile Delivery Platform, Profile Delivery Server, or any other server or combination of servers capable provisioning eSIM profiles.
• the service provider 102 may include multiple profile servers 104.
• the device 10 may include a smart phone, smart watch, tablet, or other computing device having cellular capabilities.
• An original equipment manufacturer (OEM) of the device 10 configures the device with a specific address for a target discovery server 150 operated by the OEM — opposed to a centralized discovery server maintained and operated by the GSM A.
• the device 10 is manufactured for a particular region of the world, whereby the OEM may launch and support one or more root discovery servers in each region. Further, the device 10 is provisioned with a unique eSIM identifier (EID) 12 that uniquely identifies the device 10.
• EID unique eSIM identifier
• the profile server 104 registers a discovery event to the target discovery sewer 150 by registering a pairing between the EID (or EID prefix) 12, 13 and an address of the profile sewer 104.
• a proxy EID 13 is assigned to the device 10 for resolving an address of a target discovery sewer 150 associated with the OEM that the device 10 is configured to connect to.
• the proxy EID 13 includes a proxy EID prefix 13, 13p that functions as the discovery server-based identifier.
• the proxy EID prefix 13p is unique to the eSIM-enabled device 10 and assigned to the eSIM-enabled device 10 by the OEM of the device 10 so that the proxy EID prefix 13p is paired with a corresponding discovery sewer 150 operated by the OEM and the EID 12 of the device 10.
• the address of the target discovery sewer 150 includes a target SM-DS fully qualified domain name (FQDN), such as “aRootDs.com”, that points to the target discovery sewer 150.
• a service provider sewer 110 may execute a discovery sewer endpoint resolver (DSER) routine to obtain the address of the target discovery sewer 150 the device 10 will connect directly from the proxy EID 13 assigned to the device 10.
• the proxy EID 13 may be derived from the actual EID 12 by replacing the EID prefix (which may include the portion of the actual EID that indicates the issuer of the eSIM) with a proxy EID prefix 13p, whereby the proxy EID prefix 13p includes information for resolving the address of the target discovery server 150.
• the service provider server 110 can provision the eSIM profile 14 to the appropriate subscription manager (e.g., SM-DP+) 104 and register a discovery event to the taiget discovery server 150 for redirecting the device 10 to the subscription manager 104 for downloading the eSIM profile 14.
• the service provider sewer 110 may include a profile sewer (e.g., subscription manager) 104 or some other sewer associated with the service provider.
• the proxy EID when the proxy EID) does not include the address of the taiget discovery sewer the device is configured to connect to, the service provider sewer executes the DSER routine resolve the address of the taiget discovery sewer from the proxy EID prefix by accessing a proxy EID to EID conversion table.
• the DSER routine may use the table to convert or translate the proxy EID prefix 13p into a FQDN that points toward the taiget discovery sewer (e.g., a target SM-DS) 150.
• the target discovery sewer 150 may subsequently return the correct EID prefix 13p back to the service provider sewer 110 so that the eSIM profile 14 can be provisioned by the appropriate subscription manager (e g., SM-DP+) 104 associated with the service provider 102.
• the appropriate subscription manager e g., SM-DP+
• the service provider sewer 110 can provision the eSIM profile 14 to the appropriate subscription manager (e.g., SM-DP+) 104 and instruct the taiget discovery server 150 to direct the device 10 to that subscription manager 104 for downloading the eSIM profile 14.
• the appropriate subscription manager e.g., SM-DP+
• the taiget discovery server 150 to direct the device 10 to that subscription manager 104 for downloading the eSIM profile 14.
• FIG. 1 A depicts the device 10 packaged in box 8 and delivered by the OEM of the device to a retail shop in which an end user purchases the device from the retail shop.
• the retail shop may include a non-operator channel.
• Steps 1-5 depict steps that the device performs to activate the device 10 on the operator network during the discovery sewer-based activation procedure, while steps A-G depict steps that the service provider 102 performs.
• steps A-D depict steps performed by the service provider 102 prior to commencement of the discovery sewer-based activation, such as the OEM assigning the device 10 with a specific address of the taiget discovery server 150 operated by the OEM (Step A), shipping the device 10 to a retail establishment (Step B), an agent of the retail establishment selecting the boxed device 8, 10 from inventory (Step C), and a service provider agent scanning (Step D) a device information code (or EID) 12 from the box 8 of the device 10.
• the end user purchases the device 10 from a retail shop not affiliated with the service provider 102 and then brings the purchased device 10 to the service provider 102 to activate the device.
• the device information code 12 may include the proxy EID 13 or other globally-unique identifier assigned to the device.
• Steps E-G depict the steps the service provider 102 performs as part of the discovery server-based activation procedure in which the service provider server 110 receives the scanned device information code (Step E), executes the DSER routine to resolve the address of the target discovery server (e g., SM- DS FQDN) from the device information code 12, 13 (Step F), and registers the discovery event to the target discovery server 150 (Step G) by providing the target discovery server 150 with the device information code 12, 13 paired with an address 15 of the profile server 104 (e g., SM-DP+) having the available eSIM profile 14 for the device 10 to download.
• the target discovery server e g., SM-DP+
• the service provider server determines that the eSIM of the device is eligible to receive an eSIM profile 14 compatible with device capabilities of the device 10 and then performs profile download preparation and subscription activation process with the profile server (e.g., subscription manager) 104.
• the profile server 104 may receive relevant information (SM-DS FQDN/address, contract identifier, signed service provider authentication token, etc.) for registering the discovery event to the target discovery server 150.
• the profile server 104 may additionally receive the device-specific information (e.g., EID and/or prefix EID) 12, 13 for the process of downloading the eSIM profile 14.
• the service provider server 110 may perform steps A-G while the device is offline.
• a user of the device 10 unboxes the device purchased from the retail shop and initiates the activation process for downloading an available eSIM profile provisioned by the service provider 102 to permit operation by the device on the operator network of the service provider.
• the user may power on the device and the device may display a graphical user interface 11 that guides the user through the activation process for downloading the eSIM profile 14.
• the device 10 may execute an application that displays the graphical user interface 11 or the device may connect to a web-based application displaying the graphical user interface 11.
• the device connects to the target discovery server 150 (Step 2).
• the user provides the device information code 12, 13 that uniquely identifies the device to the target discovery server 150 to check if the eSIM on the device is eligible to receive the eSIM profile 14 compatible with capabilities of the device.
• the target discovery server 150 may detennine that the device information code 12, 13 provided by the user matches the device information code 12, 13 of the discovery event registered by the service provider server 110 to the target discovery server 150 at Step G.
• the target discovery server 150 Upon the discovery server 150 identifying the available eSIM profile 14 by matching the device information code 12, 13 to the registered discovery event, the target discovery server 150 obtains and returns the address 15 of the profile server (SM-DP+) 104 to redirect the device 10 to the profile server 104.
• the device checks for the eSIM profile 14 at the profile server (Step 4), and if available, downloads the eSIM profile 14 form the profile server (Step 5) 104 to complete remote SIM provisioning of the user device 10.
• FIG. IB depicts the discovery server-based activation procedure while the device 10 is powered-on and online.
• the user may have purchased the device 10 anywhere and simply powers-on the device to initiate the activation procedure.
• Steps 1-5 depict steps that the device 10 performs to activate the device on the operator network during the discovery server-based activation procedure, while Steps A-D depict steps that the service provider performs. More specifically, step A depicts a step performed by the service provider 102 prior to commencement of the discovery server-based activation in which the service provider 102 scans the device information code (or EID or proxy EID) 12. 13 displayed on a screen 9 of the device 10.
• EID device information code
• a quick response (QR) code 30 or other unique graphic may be scanned to obtain the device information code (or EID or proxy EID) 12, 13.
• an agent of the service provider 102 may access a device settings menu to obtain the device information code 12, 13.
• Steps B-D depict the steps the service provider 102 performs as part of the discovery server-based activation procedure in which the service provider server 110 receives the device information code (Step B) 12, 13, executes the DSER routine to resolve the address of the target discovery server (e g., SM-DS FQDN) from the device information code (Step C), and registers the discovery event to the target discovery server 150 (Step D) by providing the target discovery server 150 with the device information code 13 paired with an address 15 of the profile server (e g., SM- DP+) 104 having the available eSIM profile 14 for the device to download.
• the target discovery server e g., SM- DP+
• the service provider server 110 determines that the eSIM of the device is eligible to receive an eSIM profile 14 compatible with device capabilities of the device and then performs profile download preparation and subscription activation process with the profile server (e.g., subscription manager) 104.
• the profile server 104 may receive relevant information (SM-DS FQDN/address, contract identifier, signed service provider authentication token, etc.) for registering the discovery event to the target discovery server 150.
• the profile server 104 may additionally receive the device- specific information (e g., EID or proxy EID) for the process of downloading the eSIM profile 14.
• Steps 1-4 performed by the device 10 in FIG. IB are substantially similar to Steps 2-5 performed by the device in FIG. 1A.
• the device displays the EID 12 assigned to the device, or displays a QR code 30 or other unique graphic that may be selected to initiate the activation procedure by connecting to the target discovery server 150 and provide the device information code (EID or proxy EID) 12, 13 to the target discovery server 150.
• FIG. 2 provides a schematic view 200 of an example proxy EID 13 defined to resolve an address 152 (e.g., FQDN) of a target discovery server 150.
• the proxy EID 13 is derived from the actual EID 12.
• the EID is a globally-unique identifier assigned to the eSIM of the device.
• the EID 12 is a very long number (e.g., EID 89049032005008882600033452944865) rendering the EID challenging for a user to read while displayed on a graphical user interface, let alone dictate to a customer care agent or retail representative.
• the EID 12 may include EID prefix and body portions.
• the EID prefix may include a single field with, for example, 10 digits, while the EID body portion may include a first field with 20 digits and a second field with two (2) digits.
• the proxy EID 13 includes a proxy EID prefix 13p configured to replace the EID prefix portion of the original EID.
• the proxy EID 13 includes a body portion 13b identical to the EID body portion of the original EID 12.
• the proxy EID prefix 13p is exemplified to include two fields: a key field with eight (8) digits and an ext field with two (2) digits.
• the service provider server 110 may execute the DSER routine to resolve the address 152 of the target discovery server (e.g., SM-DS FQDN) from the proxy EID prefix 13p
• the DSER routine may resolve only the address of the target discovery server (e.g., aRootDs.com) and then the service provider server 110 must query the target discovery server 150 with the EID body (identical between the proxy EID and the original EID) to obtain the original EID prefix.
• the DESR routine resolves both the address 152 of the target discovery server 150 and the actual EID prefix.
• the DESR routine may resolve the address of the target discovery server using one of three methods depending on the information the proxy EID prefix provides.
• the DESR routine uses the first method by accessing a proxy EID 13 to EID conversion table to obtain the address 152 of the target discovery server 150.
• the service provider server 110 upon receiving the proxy EID prefix 13p can determine whether the proxy EID prefix 13p includes an encoded or compressed FQDN address 152 of the target service provider 150 FIG.
• FIG. 3 provides an example proxy EID to EID conversion table 300 having two proxy EID prefix (PEP) columns, an EID prefix column, and target discovery server address column.
• An OEM may generate a set of unique PEPs associated with a target discovery server 150 operated by the OEM such that each of the PEPs point to a same address (e.g., FQDN) 152 associated the target discovery server 150.
• the table 300 may thus include multiple sets of unique PEPs with each set associated with a corresponding target discovery server 150 and address 152 thereof.
• each row represents a respective PEP assigned to a corresponding eSIM-enabled device having a globally-unique EID.
• the PEP columns include a PEP column and a PEP ext column in which the PEP key indicates a manufacturer of the device that can be used to identify a corresponding target discovery server operated by the manufacturer.
• the EID prefix column indicates the EID prefix assigned to each corresponding eSIM- enabled device, whereby the EID prefix in each row corresponds to one of the PEPs assigned to a respective eSIM-enabled device along with the corresponding address of the target discovery server (e.g., SM-DS FQDN) the device will contact for activating the device.
• the DESR routine may access the proxy EID to EID conversion table 300 to resolve the address.
• the table 300 may be publically available and actively maintained.
• the service provider server 300 may always access the table 300 so that the DESR routine can resolve the address of a target discovery sewer from only the proxy EID prefix assigned to a given eSIM-enabled device.
• the DESR routine resolves the address of the target discovery server using the second method when the address of the target discovery server is encoded in the proxy EID prefix using Decimal ASCII.
• the address of the target discovery server may be encoded using a value converted from a Decimal ASCII table. For example, if the address is the FQDN of “rds.co”, the Decimal ASCII may use values from 65 -90 to designate capital letters A -Z and values from 97 -122 to designate lower case letters a-z. Capital letters may be used for saving a number of digits in the EID prefix (minimum of 6-digits).
• the DESR routine executing at the service provider server may extract the encoded proxy EID prefix of 826883466779 and use the ASCII table to convert the extracted proxy EID prefix into the corresponding address of the target discovery server.
• the sendee provider sener i.e., at the profile server
• the DESR routine uses the third method to conduct a reverse DNS-like approach on the received proxy EID prefix when the received proxy EID prefix is formatted as a compressed IPv6 Address prefix.
• the target discovery service obtains IPv6 addresses prefix (e.g., 2620:0:800/40) and creates a DNS record associating 2620:0:800: 1 IPV6 address with an address (e.g., FQDN) of the target discovery server.
• the proxy EID prefix is 40-bit long and the value provided by the device is “262000000800’ .
• the DESR routine receives and converts the proxy EID prefix (e.g., 262000000800) into the IPV6 address by adding zeroes to the remaining 87 bits and 1 to the last bit, to thereby provide 2620:0:800: .1.
• the DESR routine executes a reverse DNS look-up function to extract the address (e.g., FQDN of the target discovery server.
• the service provider server i.e., at the profile server
• FIGS. 4A--4D are schematic views of example state diagrams 400a ⁇ d operations performed by a service provider server 110 during the DESR routine for resolving an address 152 of a target discovery server 150 that an eSIM-enabled device 10 connects to.
• the eSIM-enabled device includes the eSIM (e.g., eUICC) 42 technology that allows the device to download an eSIM profile 14 (also referred to as “carrier profile” or “subscription profile” or “operational profile”) to permit the device to operate on a network of a service provider (e.g., MNO or MVNO) 102 without having a physical SIM card.
• a service provider e.g., MNO or MVNO
• RSP remote SIM provisioning
• the device also includes a local profile assistant (LPA) 44 that resides on the device as a standalone, system app for managing SIM profiles on the eSIM (i.e.., eUICC chip).
• LPA local profile assistant
• the LPA serves as a bridge between remote service provider servers, including a profile server/subscription manager (SM-DP+) that prepares, stores, and delivers eSIM profiles to devices) and the eUICC chip
• the service provider server 110 is associated with the service provider and may include an MNO or MVNO server 106 and the profile server (e.g., SM-DP+) 104.
• the profile server 104 is configured to generate and reserve the eSIM profile 14 to the EID 42 associated with the device 10.
• the SM-DS corresponds to the target discovery server 150 operated by the manufacturer of the eSIM-enabled device 10.
• the service provider server 110 executes the DESR routine to resolve the address 152 of the target discovery server 150 from the proxy EID prefix 13p and then obtains the actual EID prefix from the target discovery server 150.
• the server provider server 110 includes data processing hardware 610 (FIG. 6) and memory hardware 620 (FIG. 6) in communication with the data processing hardware 610 and storing instructions that when executed on the data processing hardware 610 to perform operations.
• the LPA 44 of the eSIM-enabled device 10 subscribes to services of the target discovery server (SM-DS) 150 operated by the manufacturer of the eSIM-enabled device 10, and at time 2, the target discovers' server 150 assigns a unique proxy EID prefix 13p to the eSIM-enabled device.
• the target discovery server 150 operated by the OEM of the device may generate unique proxy EID prefixes that may be assigned to eSIM-enabled devices manufactured by the OEM This may occur while the device is offline.
• the target discovery server 150 generates and assigns the unique proxy EID prefix 13p when the device is powered-on and online.
• the LPA 44 queries the eSIM (eUICC) 42 to obtain the globally- unique EID 12 assigned to the eSIM 42, and at time 4, converts the EID 12 to a corresponding proxy EID 13 using the unique proxy EID prefix 13p assigned by the target discovers' server 150.
• the proxy EID 13 includes a same EID body portion as the actual EID 12, the conversion can simply include the proxy EID prefix 13p replacing the prefix portion of the actual EID 12. Accordingly, when the device 10 is purchased and an end user wants to activate the device on a carrier network of the service provider 102, the service provider server 110 can request the EID 42 from the LPA 44 and receive the proxy EID 13 converted therefrom from the LPA 44 at time 5.
• the MNO server 106 of the service provider server 110 uses the proxy EID 13 to issue a download and confirm order with the profile server (SM-DP+) 104.
• the profile server 104 is configured to reserve the eSIM profile 14 to the proxy EID 13.
• the profile server (SM-DP+) 104 executes the DESR routine to resolve only the address 152 of the target discovery server 150 from the proxy EID prefix 13p.
• the DESR routine may use one of the three methods discussed above depending on the information included in the proxy EID prefix 13p
• the profile server 104 contacts the target discovery server 150 using the resolved address 152 to register a discovery event with the target discovery server 150.
• the discovery event (as shown in step G of FIG. 1 A and step D of FIG.
• the profile server 104 may specify the address 15 of the profile server 104 paired with the proxy EID 13.
• the profile server 104 may also query the target discovery server 150 with the body portion 13b of the proxy EID 13 to obtain the original EID prefix
• the target discovery server 150 may convert the proxy EID prefix into the actual EID 12 and provide the actual EID 12 back to the profile server 104.
• the profile server 104 returns the actual EID 12 back to the MNO server 106.
• the profile server 104 does not require the actual EID 12 and is instead configured to reserve the eSIM profile 14 to the proxy EID 13.
• the LPA 44 checks the target discovery server 150 for the discovers' event to see if the eSIM profile 14 is available for download, whereby the target discovery sewer 150 redirects the device 10 to the profile sewer 104 to permit the device 10 to download the eSIM profile 14 therefrom.
• the LPA 44 may check for the discovery event using the actual EID 12 or the proxy EID 13 (when the steps at times 9 and 10 are not performed).
• FIG. 4B is substantially similar to FIG. 4A except that when the service provider executes the DESR routine, the service provider also resolves the actual EID prefix from the proxy EID prefix in addition to resolving the address of the target discovery sewer. Accordingly, the service provider may register the discovery event to the target discovery sewer using the actual EID prefix without having to request the actual EID from the discovery sewer.
• FIGS. 4C and 4D depict the MNO or MVNO sewer of the service provider executing the DESR routine instead of the profile sewer.
• FIG 4C shows the MNO or MVNO sewer executing the DESR routine to resolve both the address of the target discovery sewer and the actual EID prefix from the proxy EID provided from the LPA.
• the MNO of the service provider sewer uses the resolved actual EID to issue a download and confirm order with the profile sewer (SM- DP+).
• the download and confirm order includes the resolved address of the target discovery sewer (e g., SM-DS FQDN) to permit the profile sewer to register the discovery event at the target discovery sewer.
• 4D depicts the execution of the DESR routine at the MNO or MVNO server only resolving the address of the target discovery server (e.g., SM-DS FQDN), thereby leaving the profile sewer with the responsibility of obtaining the actual EID from the target discovery server with issuing the discovery event similar to FIG. 4A at time 8.
• the profile server may not require the actual EID and instead reserve the eSIM profile to the proxy EID.
• the discovery event registered to the target discovery server pairs the proxy EID with the address of the profile server such that the end user only needs to check the target discovery server for the discovery even by providing the proxy EID.
• FIG 5 shows a flowchart for an example arrangement of operations for a method 500 of assigning a new eSIM-enabled device 10 a proxy EID 13 for contacting a prescribed profile server 104 for downloading a corresponding eSIM profile 14 therefrom for activation of the device 10.
• the method 500 may execute on the data processing hardware 610 (FIG. 6) of the service provider server 110 based on instructions stored on the memory hardware 620 (FIG. 6) of the service provider server 110.
• the method 500 includes receiving a request to provision an embedded subscriber identity module (eSIM) profile 14 to an eSIM-enabled device 10.
• the request includes a proxy eSIM identifier (BID) prefix 13p.
• the eSIM profile 14 to be provisioned is associated with a service provider 102 of a mobile communication service a user of the eSIM-enabled device 10 subscribes to.
• the method 500 includes determining whether the proxy EID prefix 13p includes an address 152 of a target discovery sewer 150 the eSIM- enabled device 10 is configured to connect to.
• the method 500 includes extracting the address 152 of the target discovery sewer 150 from the proxy EID prefix 13p
• the method 500 includes registering a discovery event with the target discovery sewer 150
• the discovery event indicates that the service provider 102 has resewed the eSIM profile 14 to the proxy EID 13 or an actual EID 12 assigned to the eSIM-enabled device 10.
• a software application may refer to computer software that causes a computing device to perform a task.
• a software application may be referred to as an “application,” an “app,” or a “program.”
• Example applications include, but are not limited to, system diagnostic applications, system management applications, system maintenance applications, word processing applications, spreadsheet applications, messaging applications, media streaming applications, social networking applications, and gaming applications.
• the non-transitory memory may be physical devices used to store programs (e.g., sequences of instructions) or data (e g., program state information) on a temporary or permanent basis for use by a computing device.
• the non-transitory memory may be volatile and/or non-volatile addressable semiconductor memory. Examples of non- volatile memory include, but are not limited to, flash memory and read-only memory (ROM) / programmable read-only memory (PROM) / erasable programmable read-only memory (EPROM) / electronically erasable programmable read-only memory (EEPROM) (e g., typically used for firmware, such as boot programs).
• Examples of volatile memory include, but are not limited to, random access memory (RAM), dynamic random access memory (DRAM), static random access memory (SRAM), phase change memory (PCM) as well as disks or tapes.
• FIG. 6 is a schematic view of an example computing device 600 that may be used to implement the systems and methods described in this document.
• the computing device 600 is intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers
• the components shown here, their connections and relationships, and their functions, are meant to be exemplary only, and are not meant to limit implementations of the inventions described and/or claimed in this document.
• the computing device 600 includes a processor 610, memory 620, a storage device 630, a high-speed interface/controller 640 connecting to the memory 620 and high-speed expansion ports 650, and a low speed interface/controller 660 connecting to a low speed bus 670 and a storage device 630.
• Each of the components 610, 620, 630, 640, 650, and 660 are interconnected using various busses, and may be mounted on a common motherboard or in other manners as appropriate.
• the processor (e.g., data processing hardware) 610 can process instructions for execution within the computing device 600, including instructions stored in the memory 620 or on the storage device 630 to display graphical information for a graphical user interface (GUI) on an external input/output device, such as display 680 coupled to high speed interface 640.
• GUI graphical user interface
• multiple processors and/or multiple buses may be used, as appropriate, along with multiple memories and types of memory.
• multiple computing devices 600 may be connected, with each device providing portions of the necessary operations (e.g., as a server bank, a group of blade servers, or a multi-processor system).
• the memory (e.g., memory hardware) 620 stores information non-transitorily within the computing device 600.
• the memory 620 may be a computer-readable medium, a volatile memory unit(s), or non-volatile memory unit(s).
• the non-transitory memory 620 may be physical devices used to store programs (e.g., sequences of instructions) or data (e.g , program state information) on a temporary or permanent basis for use by the computing device 600.
• non-volatile memory examples include, but are not limited to, flash memory and read-only memory (ROM) / programmable read-only memory (PROM) / erasable programmable read-only memory (EPROM) / electronically erasable programmable read-only memory (EEPROM) (e.g., typically used for firmware, such as boot programs).
• volatile memory examples include, but are not limited to, random access memory (RAM), dynamic random access memory (DRAM), static random access memory- (SRAM), phase change memory (PCM) as well as disks or tapes.
• RAM random access memory
• DRAM dynamic random access memory
• SRAM static random access memory-
• PCM phase change memory
• the storage device 630 is capable of providing mass storage for the computing device 600. In some implementations, the storage device 630 is a computer- readable medium.
• the storage device 630 may be a floppy disk device, a hard disk device, an optical disk device, or a tape device, a flash memory or other similar solid state memory device, or an array of devices, including devices in a storage area network or other configurations.
• a computer program product is tangibly embodied in an information carrier.
• the computer program product contains instructions that, when executed, perform one or more methods, such as those described above.
• the information carrier is a computer- or machine-readable medium, such as the memory 620, the storage device 630, or memory on processor 610.
• the high speed controller 640 manages bandwidth-intensive operations for the computing device 600, while the low speed controller 660 manages lower bandwidth- intensive operations.
• the high-speed controller 640 is coupled to the memory 620, the display 680 (e g., through a graphics processor or accelerator), and to the high-speed expansion ports 650, which may accept various expansion cards (not shown).
• the low-speed controller 660 is coupled to the storage device 630 and a low-speed expansion port 690.
• the low-speed expansion port 690 which may include various communication ports (e.g., USB, Bluetooth, Ethernet, wireless Ethernet), may be coupled to one or more input/output devices, such as a keyboard, a pointing device, a scanner, or a networking device such as a switch or router, e.g., through a network adapter.
• the computing device 600 may be implemented in a number of different forms, as shown in the figure. For example, it may be implemented as a standard server 600a or multiple times in a group of such servers 600a, as a laptop computer 600b, or as part of a rack server system 600c.
• Various implementations of the systems and techniques described herein can be realized in digital electronic and/or optical circuitry, integrated circuitry, specially designed ASICs (application specific integrated circuits), computer hardware, firmware, software, and/or combinations thereof.
• ASICs application specific integrated circuits
• These various implementations can include implementation in one or more computer programs that are executable and/or interpretable on a programmable system including at least one programmable processor, which may be special or general purpose, coupled to receive data and instructions from, and to transmit data and instructions to, a storage system, at least one input device, and at least one output device.
• the processes and logic flows described in this specification can be performed by one or more programmable processors, also referred to as data processing hardware, executing one or more computer programs to perform functions by operating on input data and generating output.
• the processes and logic flows can also be performed by- special purpose logic circuitry, e.g., an FPGA (field programmable gate array) or an ASIC (application specific integrated circuit).
• processors suitable for the execution of a computer program include, by way of example, both general and special purpose microprocessors, and any one or more processors of any kind of digital computer.
• a processor will receive instructions and data from a read only memory or a random access memory or both.
• the essential elements of a computer are a processor for performing instructions and one or more memory devices for storing instructions and data.
• a computer will also include, or be operatively coupled to receive data from or transfer data to, or both, one or more mass storage devices for storing data, e.g , magnetic, magneto optical disks, or optical disks.
• mass storage devices for storing data, e.g , magnetic, magneto optical disks, or optical disks.
• Computer readable media suitable for storing computer program instructions and data include all forms of non-volatile memory, media and memory devices, including by way of example semiconductor memory devices, e g., EPROM, EEPROM, and flash memory devices; magnetic disks, e.g., internal hard disks or removable disks, magneto optical disks; and CD ROM and DVD-ROM disks.
• the processor and the memory can be supplemented by, or incorporated in, special purpose logic circuitry.
• one or more aspects of the disclosure can be implemented on a computer having a display device, e.g., a CRT (cathode ray tube), LCD (liquid crystal display) monitor, or touch screen for displaying information to the user and optionally a keyboard and a pointing device, e.g., a mouse or a trackball, by which the user can provide input to the computer.
• a display device e.g., a CRT (cathode ray tube), LCD (liquid crystal display) monitor, or touch screen for displaying information to the user and optionally a keyboard and a pointing device, e.g., a mouse or a trackball, by which the user can provide input to the computer.
• Other kinds of devices can be used to provide interaction with a user as well; for example, feedback provided to the user can be any form of sensory feedback, e.g., visual feedback, auditory feedback, or tactile feedback; and input from the user can be received in any form, including acoustic, speech, or tactile input

Landscapes

• Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computer Security & Cryptography (AREA)
• Databases & Information Systems (AREA)
• Data Exchanges In Wide-Area Networks (AREA)
• Mobile Radio Communication Systems (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=77051124

Family Applications (1)

Country Status (6)

Families Citing this family (6)

Family Cites Families (9)

• 2021
  • 2021-06-16 EP EP21746205.0A patent/EP4098010A1/de active Pending
  • 2021-06-16 WO PCT/US2021/037564 patent/WO2021257659A1/en not_active Ceased
  • 2021-06-16 KR KR1020227037819A patent/KR102789079B1/ko active Active
  • 2021-06-16 CN CN202180043327.5A patent/CN115943654A/zh active Pending
  • 2021-06-16 JP JP2022574609A patent/JP7631378B2/ja active Active
  • 2021-06-16 US US17/348,865 patent/US11696116B2/en active Active
• 2023
  • 2023-06-29 US US18/344,761 patent/US12048061B2/en active Active

Also Published As

Similar Documents

Legal Events